Skip To Main Content
Glossary/NDPA (Nigeria Data Protection Act)
GRC

What is NDPA (Nigeria Data Protection Act)?

Nigeria's primary data protection legislation establishing the Nigeria Data Protection Commission (NDPC) and setting rules for processing personal information.

Definition

Nigeria's primary data protection legislation establishing the Nigeria Data Protection Commission (NDPC) and setting rules for processing personal information.

The Nigeria Data Protection Act (NDPA) is Nigeria's comprehensive data protection legislation, enacted in 2023 and enforced by the Nigeria Data Protection Commission (NDPC). The NDPA establishes rules for processing personal information, including consent requirements, data subject rights, cross-border transfer restrictions, and mandatory data protection compliance for all organisations processing personal data.

As Africa's largest economy and most populous nation, Nigeria's NDPA represents a significant regulatory development for enterprises operating in West Africa. YIPS Africa helps Nigerian organisations achieve NDPA compliance through comprehensive gap analysis, policy development, and continuous compliance monitoring.

Need Expert Guidance?

Talk to Our AI Governance & GRC Specialists

Our ISACA-certified professionals help enterprises navigate POPIA, NDPA, ISO 42001, and AI compliance frameworks across Africa.